Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5fLQzJY8VNKhmPGEb0bTjDO6Pco.roa
File:                     5fLQzJY8VNKhmPGEb0bTjDO6Pco.roa (raw, json)
Hash identifier:          yqqw0cny2xkXvo3RTdbZrvYMQHaGWXIov2Mt0TGZoQs=
Subject key identifier:   E5:F2:D0:CC:96:3C:54:D2:A1:98:F1:84:6F:46:D3:8C:33:BA:3D:CA
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018D1842422FF4939FD5DB617A62EC200A5E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5fLQzJY8VNKhmPGEb0bTjDO6Pco.roa
Signing time:             Wed 17 Jan 2024 16:30:11 +0000
ROA not before:           Wed 17 Jan 2024 16:30:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     24768
IP address blocks:        82.152.179.0/24 maxlen: 24
                          82.153.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Jan 2024 10:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:18:42:42:2f:f4:93:9f:d5:db:61:7a:62:ec:20:0a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan 17 16:30:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e5f2d0cc963c54d2a198f1846f46d38c33ba3dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4c:57:cc:fd:4b:8b:b4:20:92:68:88:b3:0a:
                    7b:33:2f:7c:32:54:0c:f8:ba:9f:56:16:4a:38:1d:
                    b3:ed:00:5a:c7:35:c2:4b:38:72:49:f5:0f:1f:0a:
                    1c:43:fb:e9:4e:76:a7:05:f3:2d:a6:a5:e5:ec:1a:
                    f0:a0:72:ca:be:31:a9:73:48:75:52:09:27:f8:37:
                    c6:eb:e0:6c:df:a2:e1:10:de:4d:d2:7d:34:d1:eb:
                    23:93:51:c1:12:09:f0:96:c7:3f:9c:33:1d:c2:e7:
                    4e:57:e9:8d:1c:62:c9:42:de:bd:df:16:49:d0:8a:
                    48:0f:a6:ce:25:58:33:11:49:bc:6c:d8:d6:a3:05:
                    a6:93:4a:6c:50:80:7c:a6:0d:47:53:ea:ad:70:42:
                    bf:22:aa:ca:b3:5b:37:34:fa:d4:d5:b3:4c:71:e8:
                    f2:37:98:1f:ab:f3:d4:d6:95:06:cc:b7:84:3f:f2:
                    32:34:72:82:46:86:b2:d7:e4:33:24:34:f0:d6:02:
                    cd:b7:b0:93:a7:b0:65:f0:c8:a1:0e:ee:21:82:d8:
                    48:e0:da:70:ed:c3:4c:8f:b3:db:87:6d:30:5d:a6:
                    a4:b1:13:a3:dd:84:4e:e2:31:ff:c7:cc:3f:38:cc:
                    bc:54:93:49:97:fe:d1:96:b1:48:5e:7f:fb:83:83:
                    18:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F2:D0:CC:96:3C:54:D2:A1:98:F1:84:6F:46:D3:8C:33:BA:3D:CA
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5fLQzJY8VNKhmPGEb0bTjDO6Pco.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.152.179.0/24
                  82.153.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:fc:d3:43:ca:86:ab:a5:02:a7:d9:9b:ec:ab:6b:b3:61:c3:
         da:73:38:36:2d:fa:8e:8b:e0:bf:17:66:9e:43:31:12:19:94:
         bc:09:0c:71:79:b9:44:f4:e3:fc:f2:6a:81:23:2a:c5:7d:8b:
         27:a2:77:b0:fe:5c:a1:82:06:50:95:75:36:05:97:f5:2f:97:
         01:2f:e0:2b:ef:4d:c8:52:b4:7a:91:c4:5f:bd:01:7a:d7:61:
         63:ee:b7:17:80:65:59:b7:ac:2a:53:04:8f:e1:c5:3b:14:7b:
         29:ef:cc:3f:a6:c5:7d:9c:c7:d4:0c:19:a0:e5:4c:b1:bf:4e:
         20:4a:e0:e3:51:4c:fb:d2:08:6d:71:c3:68:17:95:f5:f5:be:
         8e:24:a5:c1:17:1c:4b:d4:2a:77:3c:b2:fa:0e:3b:00:a6:3f:
         c4:9b:5b:5e:58:a2:2f:df:c3:af:18:d2:ee:6e:85:6f:51:02:
         24:cd:ca:14:82:b9:44:87:80:a1:77:b9:da:45:c7:a5:a6:61:
         40:83:8f:46:f2:17:3b:8b:01:2a:ab:3e:97:34:4f:9c:34:e5:
         26:4c:e7:5b:44:4c:d1:00:01:61:56:01:ae:b5:a3:87:78:15:
         2c:c8:cd:94:31:19:5c:bf:84:df:40:97:89:d2:89:e3:d0:2a:
         ac:22:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:20 2024 by rpki-client on console-ams.rpki-client.org